Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier: uOdqtLkzM6YZ3ebfAqorj1xCRSU1EUzcgIhCmWYZzgM=
Subject key identifier: A1:EC:45:7E:C1:EC:A2:B5:57:23:E4:68:73:17:9E:5D:02:3A:BF:9F
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 01A0C8218D9A8D2DC921D96BCD508D9702D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 08:00:36 +0000
Manifest this update: Tue 22 Sep 2026 08:00:36 +0000
Manifest next update: Wed 23 Sep 2026 08:00:36 +0000
Files and hashes: 1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: Qa+lalgVDGTVdwq994etKX1SN7Dq94TEQIrZQ74wUdg=)
3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:8d:9a:8d:2d:c9:21:d9:6b:cd:50:8d:97:02:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Sep 22 08:00:36 2026 GMT
Not After : Sep 23 08:00:36 2026 GMT
Subject: CN=a1ec457ec1eca2b55723e46873179e5d023abf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:c2:95:0d:03:68:0e:9f:ce:d0:0a:de:8d:
f2:a2:96:bd:6b:3e:7d:d1:3f:29:b6:e7:42:cd:6b:
6b:0f:12:ae:ee:ca:bd:dc:9e:38:1b:1f:28:28:84:
99:8d:ef:bb:a6:41:68:88:9a:69:28:b8:11:4e:24:
ae:11:2a:c5:ba:c6:43:8f:85:4d:cd:f2:a6:29:32:
d4:af:96:e2:62:cd:ad:8b:8f:6b:9e:03:cb:ec:d4:
3c:4d:8a:41:4f:16:70:9a:31:d9:9b:89:3d:9d:dd:
ad:46:a2:8a:19:56:c8:03:4c:35:2e:aa:65:38:b3:
61:6a:53:c3:d4:fb:91:10:79:15:3b:8f:89:e9:40:
54:3e:f8:b2:dd:e2:73:f8:0e:44:8f:75:cf:83:04:
64:b2:44:11:f3:32:d9:db:8b:89:fc:12:88:0c:fc:
e9:ae:a0:d9:0e:1e:a6:e3:c7:1c:2e:e5:e5:1d:30:
16:06:f5:5e:bb:58:fa:78:b1:77:91:37:b9:95:71:
45:a6:88:f3:1f:d6:15:bd:45:ef:36:94:1f:ad:cd:
0b:c4:d2:cb:39:b3:04:52:89:60:f1:80:d4:18:19:
07:b7:07:06:55:f8:e3:2a:41:98:a7:8a:13:66:74:
38:49:4e:d0:df:9a:16:45:1c:b3:b5:ca:ad:88:49:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:45:7E:C1:EC:A2:B5:57:23:E4:68:73:17:9E:5D:02:3A:BF:9F
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:27:7e:d5:d9:da:2c:f2:ca:8f:e1:dd:aa:c5:29:4f:f4:
5e:1d:c2:f3:20:1d:84:dd:5f:4e:d0:fb:ca:6a:2d:45:13:f8:
8e:41:04:6d:f8:f5:2f:16:ce:75:3e:88:9e:5e:1c:ac:04:f5:
d2:99:d8:d6:74:ab:d0:df:3d:9a:97:b7:51:d9:b3:18:58:f9:
0d:2b:29:25:f7:c6:78:c7:d9:87:15:83:31:f8:b8:fc:a8:fc:
20:96:6a:e0:ab:aa:d7:b5:f7:cd:b3:ad:ac:90:a4:ce:a3:b1:
89:7d:bf:4d:f7:dd:fe:c5:89:1e:a4:58:27:68:b3:20:f7:85:
a8:3a:bd:a4:0b:d9:2b:9b:d9:e7:6a:3d:c5:15:d8:33:bf:7b:
56:a7:20:60:ec:45:e3:02:39:4c:25:a5:0c:b1:66:9c:92:b2:
80:87:17:df:56:15:c4:c8:51:e5:22:04:4a:fe:4b:ab:86:1d:
d3:2b:0f:7e:6f:25:2e:48:3d:8f:f7:89:b5:9f:9f:68:e0:62:
a0:c8:f0:ba:fc:cb:ea:59:ec:6f:6f:d5:d0:01:81:62:d8:c8:
bc:44:86:bd:34:b2:9d:b0:e2:3e:a0:72:75:b6:de:8d:b6:b8:
63:78:0f:d7:71:4b:d0:e5:5c:19:66:d7:a1:0a:5d:08:fb:48:
2a:c9:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:11:14 2026 by rpki-client